require 'spec_helper' describe 'check_enabled', :os => :gentoo do subject { commands.check_enabled('httpd') } it { should eq "/sbin/rc-update show | grep '^\\s*httpd\\s*|\\s*\\(boot\\|default\\)'" } end describe 'check_file', :os => :gentoo do subject { commands.check_file('/etc/passwd') } it { should eq 'test -f /etc/passwd' } end describe 'check_directory', :os => :gentoo do subject { commands.check_directory('/var/log') } it { should eq 'test -d /var/log' } end describe 'check_user', :os => :gentoo do subject { commands.check_user('root') } it { should eq 'id root' } end describe 'check_group', :os => :gentoo do subject { commands.check_group('wheel') } it { should eq 'getent group | grep -wq wheel' } end describe 'check_installed', :os => :gentoo do subject { commands.check_installed('httpd') } it { should eq '/usr/bin/eix httpd --installed' } end describe 'check_listening', :os => :gentoo do subject { commands.check_listening(80) } it { should eq "netstat -tunl | grep ':80 '" } end describe 'check_running', :os => :gentoo do subject { commands.check_running('httpd') } it { should eq 'service httpd status' } end describe 'check_running_under_supervisor', :os => :gentoo do subject { commands.check_running_under_supervisor('httpd') } it { should eq 'supervisorctl status httpd' } end describe 'check_process', :os => :gentoo do subject { commands.check_process('httpd') } it { should eq 'ps aux | grep -w httpd | grep -qv grep' } end describe 'check_file_contain', :os => :gentoo do subject { commands.check_file_contain('/etc/passwd', 'root') } it { should eq "grep -q 'root' /etc/passwd" } end describe 'check_file_contain_within', :os => :gentoo do context 'contain a pattern in the file' do subject { commands.check_file_contain_within('Gemfile', 'rspec') } it { should eq "sed -n '1,$p' Gemfile | grep -q 'rspec' -" } end context 'contain a pattern after a line in a file' do subject { commands.check_file_contain_within('Gemfile', 'rspec', '/^group :test do/') } it { should eq "sed -n '/^group :test do/,$p' Gemfile | grep -q 'rspec' -" } end context 'contain a pattern before a line in a file' do subject {commands.check_file_contain_within('Gemfile', 'rspec', nil, '/^end/') } it { should eq "sed -n '1,/^end/p' Gemfile | grep -q 'rspec' -" } end context 'contain a pattern from within a line and another line in a file' do subject { commands.check_file_contain_within('Gemfile', 'rspec', '/^group :test do/', '/^end/') } it { should eq "sed -n '/^group :test do/,/^end/p' Gemfile | grep -q 'rspec' -" } end end describe 'check_mode', :os => :gentoo do subject { commands.check_mode('/etc/sudoers', 440) } it { should eq 'stat -c %a /etc/sudoers | grep \'^440$\'' } end describe 'check_owner', :os => :gentoo do subject { commands.check_owner('/etc/passwd', 'root') } it { should eq 'stat -c %U /etc/passwd | grep \'^root$\'' } end describe 'check_grouped', :os => :gentoo do subject { commands.check_grouped('/etc/passwd', 'wheel') } it { should eq 'stat -c %G /etc/passwd | grep \'^wheel$\'' } end describe 'check_cron_entry', :os => :gentoo do subject { commands.check_cron_entry('root', '* * * * * /usr/local/bin/batch.sh') } it { should eq 'crontab -u root -l | grep "\* \* \* \* \* /usr/local/bin/batch.sh"' } end describe 'check_link', :os => :gentoo do subject { commands.check_link('/etc/system-release', '/etc/redhat-release') } it { should eq 'stat -c %N /etc/system-release | grep /etc/redhat-release' } end describe 'check_installed_by_gem', :os => :gentoo do subject { commands.check_installed_by_gem('jekyll') } it { should eq 'gem list --local | grep \'^jekyll \'' } end describe 'check_belonging_group', :os => :gentoo do subject { commands.check_belonging_group('root', 'wheel') } it { should eq "id root | awk '{print $3}' | grep wheel" } end describe 'check_ipatbles', :os => :gentoo do context 'check a rule without a table and a chain' do subject { commands.check_iptables_rule('-P INPUT ACCEPT') } it { should eq "iptables -S | grep '\\-P INPUT ACCEPT'" } end context 'chack a rule with a table and a chain' do subject { commands.check_iptables_rule('-P INPUT ACCEPT', 'mangle', 'INPUT') } it { should eq "iptables -t mangle -S INPUT | grep '\\-P INPUT ACCEPT'" } end end describe 'check_selinux', :os => :gentoo do context 'enforcing' do subject { commands.check_selinux('enforcing') } it { should eq "/usr/sbin/getenforce | grep -i 'enforcing'" } end context 'permissive' do subject { commands.check_selinux('permissive') } it { should eq "/usr/sbin/getenforce | grep -i 'permissive'" } end context 'disabled' do subject { commands.check_selinux('disabled') } it { should eq "/usr/sbin/getenforce | grep -i 'disabled'" } end end describe 'get_mode', :os => :gentoo do subject { commands.get_mode('/dev') } it { should eq 'stat -c %a /dev' } end